INDIVIDUAL MCP TOOL

pin_tool_surface

Compute a stable digest over an MCP server's tools/list — each tool's name, description and inputSchema — and return a signed attestation.

holoweave.orgnone authenticationAvailability not checked

LIVE ENDPOINT

https://witness.holoweave.org/mcp

No auth detected

Connect to this endpoint to inspect the live schema for pin_tool_surface and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.auto-witness]
url = "https://witness.holoweave.org/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "auto-witness": {
      "type": "http",
      "url": "https://witness.holoweave.org/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: auto-witness
Remote MCP URL: https://witness.holoweave.org/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "auto-witness": {
      "url": "https://witness.holoweave.org/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "auto-witness": {
      "type": "http",
      "url": "https://witness.holoweave.org/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "auto-witness",
  "transport": "streamable-http",
  "url": "https://witness.holoweave.org/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

check_tool_surface_drift — Compare an MCP server's current tools/list against a baseline digest you hold and return a signed attestation naming every tool added, removed or silently redefined since then.
witness_url — Fetch a public URL and return signed, timestamped evidence of what it served: status, provenance headers, SHA-256 of the body.
check_tx_finality — Read a Base transaction's receipt and return a signed settlement statement: succeeded or reverted, every USDC transfer it carried, block time, confirmations, and whether the block is safe or finalized by the chain's own tags.
check_ai_permission — May a named AI agent fetch, or train on, a URL?
witness_keys — Fetch a counterparty's JWK Set (OIDC jwks_uri or web bot auth key directory) and return a signed record of every key by RFC 7638 thumbprint, its defects, and a set digest; pass your prior digest or thumbprints to be told whether the keys rotated and which.
read_url — Fetch a public page and return its title and extracted text, bound to signed evidence of the bytes it came from — URL, time, status, SHA-256 — so what you quote is traceable to what was served.